Summary
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
Security Fix(es):
* php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
* php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)
* php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | php-pecl-apcu | 0:5.1.23-1.module+el9.7.0+40004+bf50a568 |
| Rocky Linux · 9 | php-pecl-apcu | 0:5.1.23-1.module+el9.7.0+40005+715283ec |
| Rocky Linux · 9 | php-pecl-redis6 | 0:6.1.0-2.module+el9.7.0+40005+715283ec |
| Rocky Linux · 9 | php-pecl-rrd | 0:2.0.3-4.module+el9.7.0+40004+bf50a568 |
| Rocky Linux · 9 | php-pecl-rrd | 0:2.0.3-4.module+el9.7.0+40003+454ed3c4 |
| Rocky Linux · 9 | php-pecl-rrd | 0:2.0.3-4.module+el9.7.0+40005+715283ec |
| Rocky Linux · 9 | php-pecl-xdebug3 | 0:3.3.1-1.module+el9.7.0+40005+715283ec |
| Rocky Linux · 9 | php-pecl-zip | 0:1.22.3-1.module+el9.7.0+40004+bf50a568 |
| Rocky Linux · 9 | php-pecl-zip | 0:1.22.3-1.module+el9.7.0+40005+715283ec |
Vulnerabilities 3
-
High 8.2
NULL Pointer Dereference in PDO quoting
In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \x99) in a prepared sta…
-
Medium 6.5
Heap buffer overflow in array_merge()
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, due to a…
-
Medium 6.3CVE-2025-14177 Public exploit
Information Leak of Memory in getimagesize
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode …